Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25369.roa
File:                     AS25369.roa (raw, json)
Hash identifier:          G6I4nhIi5BLPXYCn+I1CVPLBc45r0Eh/pmwUFWdOFaI=
Subject key identifier:   F4:0A:03:22:44:DC:4D:21:D9:41:3D:FC:C8:B8:CB:EE:AC:F0:36:03
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       47288C6563E464C5D7CDAE76B2132467CCF8CAF1
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25369.roa
Signing time:             Thu 22 Oct 2026 20:49:22 +0000
ROA not before:           Thu 22 Oct 2026 20:44:22 +0000
ROA not after:            Thu 21 Oct 2027 20:49:22 +0000
asID:                     25369
IP address blocks:        51.146.69.0/24 maxlen: 24
                          51.194.168.0/22 maxlen: 24
                          51.194.176.0/22 maxlen: 24
                          51.194.184.0/22 maxlen: 24
                          78.105.159.0/24 maxlen: 24
                          78.105.171.0/24 maxlen: 24
                          78.105.174.0/24 maxlen: 24
                          78.105.190.0/24 maxlen: 24
                          78.105.205.0/24 maxlen: 24
                          78.105.213.0/24 maxlen: 24
                          78.105.220.0/24 maxlen: 24
                          94.116.80.0/22 maxlen: 22
                          94.116.92.0/22 maxlen: 22
                          94.116.112.0/22 maxlen: 22
                          94.116.128.0/22 maxlen: 22
                          188.220.97.0/24 maxlen: 24
                          188.220.112.0/22 maxlen: 24
                          188.221.104.0/24 maxlen: 24
                          188.221.206.0/24 maxlen: 24
                          188.221.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:28:8c:65:63:e4:64:c5:d7:cd:ae:76:b2:13:24:67:cc:f8:ca:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Oct 22 20:44:22 2026 GMT
            Not After : Oct 21 20:49:22 2027 GMT
        Subject: CN=F40A032244DC4D21D9413DFCC8B8CBEEACF03603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:e1:d4:0f:09:08:82:0e:04:7f:9d:cf:04:
                    f5:31:9a:6b:3e:25:98:01:f1:e4:93:77:b8:ca:81:
                    c8:9b:ac:6f:de:d1:b7:72:a4:f2:9d:da:a4:e7:7f:
                    18:37:05:f1:e0:26:cd:11:6a:57:58:79:2d:f7:5d:
                    17:e1:43:36:51:f3:9f:5a:0a:dc:01:f9:8d:fa:a0:
                    f1:13:fc:f2:ef:7f:19:42:36:cb:c4:b4:8f:ab:18:
                    0a:26:00:de:cd:8e:87:7a:e6:d0:40:79:84:7d:83:
                    37:53:c1:17:64:ba:a2:27:4f:0e:0a:ab:e8:5a:a5:
                    98:f4:88:94:a4:f7:9f:e8:a8:cb:5f:78:5b:98:92:
                    91:26:7c:b8:f6:1a:d2:2c:ca:0a:5c:82:5b:39:11:
                    a8:b0:8b:f5:76:c8:1c:d4:17:0e:44:5f:8a:f2:fe:
                    71:56:aa:fd:b0:10:bf:ad:30:2c:c7:f0:44:5e:df:
                    a8:0f:a2:4a:de:94:b0:1c:35:50:a0:eb:ce:7f:5a:
                    a2:b8:6f:9f:e6:fc:41:cb:f2:12:89:4e:f7:67:2d:
                    71:df:bc:de:1f:30:33:74:83:4e:fe:fe:5d:ca:04:
                    65:03:bd:ad:5b:74:8e:1b:ad:50:79:83:2e:7e:35:
                    0b:73:4d:5a:66:90:63:78:01:d0:41:97:87:f9:7a:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0A:03:22:44:DC:4D:21:D9:41:3D:FC:C8:B8:CB:EE:AC:F0:36:03
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.69.0/24
                  51.194.168.0/22
                  51.194.176.0/22
                  51.194.184.0/22
                  78.105.159.0/24
                  78.105.171.0/24
                  78.105.174.0/24
                  78.105.190.0/24
                  78.105.205.0/24
                  78.105.213.0/24
                  78.105.220.0/24
                  94.116.80.0/22
                  94.116.92.0/22
                  94.116.112.0/22
                  94.116.128.0/22
                  188.220.97.0/24
                  188.220.112.0/22
                  188.221.104.0/24
                  188.221.206.0/24
                  188.221.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:ad:c3:53:f5:4d:f4:65:00:2b:00:aa:f8:19:d9:a0:75:
         30:40:3c:14:39:a7:d3:d6:68:c9:95:1f:cf:72:7c:12:93:26:
         50:01:f7:84:93:46:08:93:eb:ff:14:6c:9f:fe:70:17:57:e5:
         6a:86:3f:4a:6d:92:76:73:43:49:55:4b:a0:76:8f:68:c0:94:
         f8:3a:6a:98:46:94:1f:3d:f0:17:d1:ef:bc:5c:61:1c:20:1e:
         ad:d4:47:8f:3f:f1:09:94:dd:39:25:bf:1f:9d:77:73:4e:9e:
         64:ac:42:3f:9e:4e:35:42:4b:75:a6:bf:cb:75:2b:f8:83:04:
         0b:72:95:60:26:fb:0a:9b:f9:d8:8b:b6:f8:e1:f6:64:f3:9e:
         0d:17:9c:88:c0:44:ab:2f:50:fb:a0:35:15:b5:e4:19:bf:f1:
         04:72:3a:a6:18:ce:71:c6:d1:11:0e:a2:8b:84:a5:3e:38:c3:
         3e:0a:d7:2f:1a:d8:30:09:18:60:5a:d8:87:ce:85:36:99:fa:
         3b:81:02:8a:7e:42:95:b4:23:d7:89:61:b7:11:10:bd:75:78:
         07:67:a8:52:6a:02:3b:86:47:60:89:9a:ac:d6:09:60:c4:b7:
         20:f5:ae:aa:47:2a:e0:26:16:8e:a7:59:74:11:41:42:dc:95:
         9f:4a:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----